Re: [newbie] I'm being DoSed!

2003-07-08 Thread Damian Gatabria
El mié, 02 de 07 de 2003 a las 21:20, Cody Harris escribió:
 I want to deny 128.175.241.43 from being connected to my, how do i do it!? 
 I'm being Dosed! 100 or more connecvtions at once! HELP!
 
 -Cody Harris

Quick  simple:

iptables -A INPUT -s 128.175.241.43 -j DROP

will work perfectly. (IF you have iptables service running,
of course :o)

Damian


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [newbie] I'm being DoSed!

2003-07-03 Thread Derek Jennings
On Thursday 03 Jul 2003 1:20 am, Cody Harris wrote:
 I want to deny 128.175.241.43 from being connected to my, how do i do it!?
 I'm being Dosed! 100 or more connecvtions at once! HELP!

 -Cody Harris

If you are using the shorewall firewall default in Mandrake then
shorewall drop 128.175.241.43
in a root terminal will block that IP.
That will only last to the next time you reboot. To make it permanent edit
/etc/shorewall/rules and add a line at the bottom

DROPnet:128.175.241.43   fw  all

derek

-- 
--
www.jennings.homelinux.net


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [newbie] I'm being DoSed!

2003-07-03 Thread Cody Harris
Is the a reply too all:
I rerouted my connection to Linux (it was attacking another comp) and 
attempted to use IPCHAINS in webmin, but my IPCHAINS are too old. i just 
hit reboot. It took my site down for 10 minutes while linux started and it 
forced stupid crond to load as well as unmount my network. Ah well. It's 
all good now. I will, however, keep these e-mails incase it happens again.

At 12:42 PM 7/3/2003 +1000, you wrote:
On Thu, 2003-07-03 at 10:20, Cody Harris wrote:
 I want to deny 128.175.241.43 from being connected to my, how do i do it!?
 I'm being Dosed! 100 or more connecvtions at once! HELP!

 -Cody Harris
Use Ethereal to find out what ports it's trying to flood out, then close
the ports. So I take it you haven't installed portsentry and all that
jazz yet?
(If you can't find portsentry on the web, I have it stashed at:

http://thor.prohosting.com/~kilgoret/files/

...just in case, mate...)

--
Thu Jul  3 12:40:00 EST 2003
 12:40:00 up 1 day,  2:00,  2 users,  load average: 0.05, 0.11, 0.09
-
|____  |kuhn media australia|
|   /-oo /| |'-.   |http://kma.0catch.com   |
|  .\__/ || |   |  ||
|   _ /  `._ \|_|_.-'  |stephen kuhn|
|  | /  \__.`=._) (_   | email: [EMAIL PROTECTED] |
-
 linux user #:267497 linux machine #:194239 * MDK 9.1  RH 7.3
 Mandrake Linux Kernel 2.4.21-11mdk Cooker for i586
-
 * This message was composed on a 100% Microsoft free computer *
-BEGIN GEEK CODE BLOCK-
Version: 3.12
GIT d-- s:- a+ C UL P+ L+++ E W++ N++ o-- K--- w---
O++ M+ V PS+++ PE Y++ PGP- t+++ 5+++ X+++ R+ tv b+++ DI+++ D++
G++ e+ h r+++ y+++
--END GEEK CODE BLOCK--
The justifications for drug testing are part of the presently fashionable
debate concerning restoring America's competitiveness. Drugs, it has been
revealed, are responsible for rampant absenteeism, reduced output, and poor
quality work.  But is drug testing in fact rationally related to the
resurrection of competitiveness?  Will charging the atmosphere of the
workplace with the fear of excretory betrayal honestly spur productivity?
Much noise has been made about rehabilitating the worker using drugs, but
to date the vast majority of programs end with the simple firing or the not
hiring of the abuser.  This practice may exacerbate, not alleviate, the
nation's productivity problem.  If economic rehabilitation is the ultimate
goal of drug testing, then criteria abandoning the rehabilitation of the
drug-using worker is the purest of hypocrisy and the worst of rationalization.
-- The concluding paragraph of Constitutional Law: The
   Fourth Amendment and Drug Testing in the Workplace,
   Tim Moore, Harvard Journal of Law  Public Policy, vol.
   10, No. 3 (Summer 1987), pp. 762-768.
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
-Cody Harris

++
 | This Signature is best in plain text!  |
++--+
| Linux Rox My Sox!  |
| Check out HCHS!|
| http://vectec.net  |
++--+
| Proud to use Mandrake Linux 8.1 as a server.  |
| Not proud to use Windows as a primary server. |
++--+
| Registered Linux user #315598  |
| Registered Linux Computer #200951  |
| Wrote on a Windoze Computer :( |
++

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[newbie] I'm being DoSed!

2003-07-02 Thread Cody Harris
I want to deny 128.175.241.43 from being connected to my, how do i do it!? 
I'm being Dosed! 100 or more connecvtions at once! HELP!

-Cody Harris

++
 | This Signature is best in plain text!  |
++--+
| Linux Rox My Sox!  |
| Check out HCHS!|
| http://vectec.net  |
++--+
| Proud to use Mandrake Linux 8.1 as a server.  |
| Not proud to use Windows as a primary server. |
++--+
| Registered Linux user #315598  |
| Registered Linux Computer #200951  |
| Wrote on a Windoze Computer :( |
++

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [newbie] I'm being DoSed!

2003-07-02 Thread Stephen Kuhn
On Thu, 2003-07-03 at 10:20, Cody Harris wrote:
 I want to deny 128.175.241.43 from being connected to my, how do i do it!? 
 I'm being Dosed! 100 or more connecvtions at once! HELP!
 
 -Cody Harris

Use Ethereal to find out what ports it's trying to flood out, then close
the ports. So I take it you haven't installed portsentry and all that
jazz yet?

(If you can't find portsentry on the web, I have it stashed at:

http://thor.prohosting.com/~kilgoret/files/

...just in case, mate...)

-- 
Thu Jul  3 12:40:00 EST 2003
 12:40:00 up 1 day,  2:00,  2 users,  load average: 0.05, 0.11, 0.09

-
|____  |kuhn media australia|
|   /-oo /| |'-.   |http://kma.0catch.com   |
|  .\__/ || |   |  ||
|   _ /  `._ \|_|_.-'  |stephen kuhn|
|  | /  \__.`=._) (_   | email: [EMAIL PROTECTED] |
-
 linux user #:267497 linux machine #:194239 * MDK 9.1  RH 7.3  
 Mandrake Linux Kernel 2.4.21-11mdk Cooker for i586
-
 * This message was composed on a 100% Microsoft free computer *

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GIT d-- s:- a+ C UL P+ L+++ E W++ N++ o-- K--- w---
O++ M+ V PS+++ PE Y++ PGP- t+++ 5+++ X+++ R+ tv b+++ DI+++ D++
G++ e+ h r+++ y+++
--END GEEK CODE BLOCK--
The justifications for drug testing are part of the presently fashionable
debate concerning restoring America's competitiveness. Drugs, it has been
revealed, are responsible for rampant absenteeism, reduced output, and poor
quality work.  But is drug testing in fact rationally related to the
resurrection of competitiveness?  Will charging the atmosphere of the
workplace with the fear of excretory betrayal honestly spur productivity?
Much noise has been made about rehabilitating the worker using drugs, but
to date the vast majority of programs end with the simple firing or the not
hiring of the abuser.  This practice may exacerbate, not alleviate, the
nation's productivity problem.  If economic rehabilitation is the ultimate
goal of drug testing, then criteria abandoning the rehabilitation of the
drug-using worker is the purest of hypocrisy and the worst of rationalization.
-- The concluding paragraph of Constitutional Law: The
   Fourth Amendment and Drug Testing in the Workplace,
   Tim Moore, Harvard Journal of Law  Public Policy, vol.
   10, No. 3 (Summer 1987), pp. 762-768.

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [newbie] I'm being DoSed!

2003-07-02 Thread Dennis Myers
On Wednesday 02 July 2003 07:20 pm, Cody Harris wrote:
 I want to deny 128.175.241.43 from being connected to my, how do i do it!?
 I'm being Dosed! 100 or more connecvtions at once! HELP!

 -Cody Harris

 ++

   | This Signature is best in plain text!  |

 ++--+

 | Linux Rox My Sox!  |
 | Check out HCHS!|
 | http://vectec.net  |

 ++--+

 | Proud to use Mandrake Linux 8.1 as a server.  |
 | Not proud to use Windows as a primary server. |

 ++--+

 | Registered Linux user #315598  |
 | Registered Linux Computer #200951  |
 | Wrote on a Windoze Computer :( |

 ++
Do you have a firewall up?  And which one is it?
-- 
Dennis M. linux user #180842

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [newbie] I'm being DoSed!

2003-07-02 Thread Kenneth E. Spress
Domain Name: UDEL.EDU

Registrant:
University of Delaware
192 South Chapel Street
Newark, DE 19716
UNITED STATES

Contacts: 

Administrative Contact:
Daniel J. Grim
Executive Director
University of Delaware
192 South Chapel Street
Newark, DE 19716
UNITED STATES
(302) 831-3700 (302) 831-1990
[EMAIL PROTECTED]



 any questions contact me directly


Thanks
Kenneth E. Spress
[EMAIL PROTECTED]
RUID # 0462790
 
Interested in a user friendly ISP that costs less Try ACN Internet
http://www.acninc.net/dialuplocations.asp?details=us
http://www.acninc.net/innerwindow.asp?theurl=signupinfo.asp


BEGIN:VCARD
VERSION:2.1
N:Spress Jr.;Kenneth;Eugene
FN:Kenneth Eugene Spress Jr.
NOTE;ENCODING=QUOTED-PRINTABLE:ACN Group Meetings=0D=0A=0D=0AInformational Meetings=0D=0A7:45 and 8:45=0D=
=0AMonday and Wednesday=0D=0A646-519-5830  # 2226=0D=0A
TEL;HOME;VOICE:586-293-5528
TEL;CELL;VOICE:586-883-3658
URL;HOME:http://www.acninfo.com/gcmudge
URL;WORK:http://www.acninc.com
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20030703T025300Z
END:VCARD
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com